On 3 January 2025, MeitY published the Draft Digital Personal Data Protection Rules, 2025, for public consultation. These draft Rules outline operational requirements, including how consent notices should be provided, breach reporting timelines, security standards, and data audits for significant fiduciaries, among other details. The public was invited to comment by March 5, 2025.